Information Asset Inventory (314.4(c)(2))

The FTC requires covered entities to keep a documented inventory of every information asset that stores, processes, or transmits customer data, noting its type, location, and purpose of use. This inventory must be regularly updated and made available for inspection under 16 CFR 314.4(c)(2).